Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
File: Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft (raw, json)
Hash identifier: iSQpcZDf98LjWDZ4AKffkcbOjUjmcbz7NSfv7YlOyBk=
Subject key identifier: 92:10:09:1A:8C:38:55:48:67:BD:0A:B9:8B:25:1C:6E:AE:82:08:38
Authority key identifier: 42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
Certificate issuer: /CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Certificate serial: 019656EF38AEB3B7581B46122B8794F49D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
Manifest number: 0F1C
Signing time: Mon 21 Apr 2025 06:00:40 +0000
Manifest this update: Mon 21 Apr 2025 06:00:40 +0000
Manifest next update: Tue 22 Apr 2025 06:00:40 +0000
Files and hashes: 1: Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl (hash: veQ7Ai/kNDGFMvSECw+vZxkOi46U8VswteXi2bdoY8Y=)
2: pGi5mprHxSOkx1tGIc-vLUmzaew.roa (hash: dSlWsgh48wgZDLLaxYVN9gYqMrT57evwFejA3CWUycE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:38:ae:b3:b7:58:1b:46:12:2b:87:94:f4:9d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f7fb8478177f48cf45bed07cbecf9b6e95de88
Validity
Not Before: Apr 21 06:00:40 2025 GMT
Not After : Apr 22 06:00:40 2025 GMT
Subject: CN=9210091a8c38554867bd0ab98b251c6eae820838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:1f:0e:5a:f1:b7:ee:37:e4:be:a6:83:31:
2c:e6:1b:66:4e:a3:41:8f:43:17:b9:78:0e:0a:f8:
08:e9:7f:f5:34:6c:14:e6:85:fb:2d:c8:6e:0d:4e:
ba:5d:8e:0e:d8:7d:bf:2c:2b:98:b0:d9:d5:e5:e0:
c5:68:70:ae:9d:a0:9f:60:f2:3b:5d:60:3a:fb:46:
0f:2f:71:2d:4c:aa:66:97:93:a1:0c:a2:7f:6b:ac:
84:ed:96:58:c9:4e:24:92:6e:fa:e0:3b:49:05:6a:
7c:6d:c0:a5:87:ce:9d:16:61:7d:d2:1d:c3:3f:8c:
f8:10:34:c1:4e:1b:4f:8c:93:26:71:81:90:ca:32:
ae:c6:db:53:70:bf:2b:4f:7d:c9:78:ae:56:e8:21:
0e:18:2d:17:d4:86:ac:a2:e4:2c:70:72:60:c1:2c:
9b:6b:ae:df:7c:ab:f9:b1:56:d8:95:13:59:36:7e:
3c:a1:64:92:37:8a:1f:b9:a3:22:f5:b4:a2:9e:55:
a3:b5:a7:e3:d2:07:42:77:ef:9f:ea:18:b9:16:f1:
40:7c:8e:8c:90:19:f3:95:5b:92:db:2e:bb:a3:02:
fc:23:82:d5:4b:42:b1:af:7d:04:e0:f9:19:c4:f4:
a8:a1:ad:07:77:db:53:ee:42:e5:36:c2:43:d1:f7:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:10:09:1A:8C:38:55:48:67:BD:0A:B9:8B:25:1C:6E:AE:82:08:38
X509v3 Authority Key Identifier:
keyid:42:F7:FB:84:78:17:7F:48:CF:45:BE:D0:7C:BE:CF:9B:6E:95:DE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qvf7hHgXf0jPRb7QfL7Pm26V3og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33e0dc-19ba-48a4-8086-1ac4c5d4292f/1/Qvf7hHgXf0jPRb7QfL7Pm26V3og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c5:f9:9f:30:26:65:4b:6c:eb:15:a8:fb:62:75:39:d0:5c:
3b:80:98:cb:69:cf:bd:a9:08:b4:eb:ec:43:7b:ee:1e:1b:b7:
7f:cd:f7:bf:95:4d:a7:c0:9b:f6:dd:e6:0d:74:59:27:4b:c0:
cf:49:f1:81:0e:55:79:a2:82:b3:be:65:6d:2c:84:0b:b0:c6:
62:03:fe:34:76:d5:a7:51:5b:7d:8f:cd:d3:53:4a:b8:fd:47:
ff:2a:d1:da:78:4c:fe:ae:5f:84:61:2c:3d:eb:f0:96:ae:0c:
10:37:dc:08:09:a8:fe:84:4c:d9:42:14:e2:e2:2d:00:53:8e:
60:b7:3a:2d:33:e6:1d:b2:18:9b:6f:a4:33:73:68:cb:4e:c9:
3b:fd:3e:50:41:0f:2a:c8:3e:0e:eb:fe:53:de:02:d3:7d:52:
eb:57:4d:b6:77:00:6f:cd:04:a5:86:ad:a1:f6:41:cc:44:20:
c7:97:a5:a1:d2:5b:e1:7d:23:69:56:cd:26:8d:c1:48:c5:2a:
80:85:f2:fa:32:ee:0d:af:bd:72:05:e3:b3:77:ec:5a:9d:38:
c1:6b:ed:fe:95:c9:9f:4a:e8:93:14:d3:37:4f:9f:b4:14:09:
92:fd:af:ce:91:a8:83:4c:72:7e:95:65:5b:f3:fb:ed:8b:1a:
82:94:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:57 2025 by rpki-client